$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa File: 3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa (raw, json) Hash identifier: 7oUl9iKqkMUE4DZwz3gfp5iBzPjostQjs+kzo1+9Ijs= Subject key identifier: 76:49:F6:95:93:41:B7:F7:35:D5:7A:B5:4E:85:03:9C:49:4D:73:B8 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 5DB3F5FC7A53013C6DE3CA0DF2137D3DB962C403 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa Signing time: Wed 08 Jan 2025 04:00:36 +0000 ROA not before: Wed 08 Jan 2025 03:55:36 +0000 ROA not after: Wed 07 Jan 2026 04:00:36 +0000 asID: 133798 IP address blocks: 203.128.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 10:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b3:f5:fc:7a:53:01:3c:6d:e3:ca:0d:f2:13:7d:3d:b9:62:c4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Jan 8 03:55:36 2025 GMT Not After : Jan 7 04:00:36 2026 GMT Subject: CN=7649F6959341B7F735D57AB54E85039C494D73B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9b:3a:a9:56:1f:06:d3:a4:88:7f:6c:88:4a: 93:fd:33:ae:9e:b9:3a:8e:9c:3d:fd:69:2b:1c:ea: 15:02:aa:62:2d:c3:5b:96:47:33:f7:2d:f8:8e:34: 04:38:07:12:a5:78:8d:14:69:10:e1:db:cb:38:1a: 6f:96:ed:80:48:1d:b5:ac:74:2a:94:9e:2c:05:16: 46:98:83:14:35:75:be:b0:e0:1e:d1:b0:ac:f0:0c: 03:74:84:41:30:bc:57:9b:44:83:1f:52:0d:d1:d7: 7d:8a:45:b8:8a:d4:a9:e2:91:b7:96:08:0c:a5:ee: 95:e7:d8:a4:3b:22:72:86:b1:68:f5:f7:63:f8:c2: 00:ba:7d:af:9d:81:99:ed:e5:3c:e3:0a:f0:db:c4: 28:03:6e:36:3d:cc:92:c0:ea:19:17:6f:31:20:d6: 53:4b:23:1b:4e:ab:01:00:ca:21:38:29:05:e5:cc: 63:42:33:50:81:48:ad:e3:e3:28:31:a4:ed:b7:95: d1:fa:04:4b:c0:cd:00:8d:2b:e2:8f:4f:67:a2:29: f6:39:b7:37:72:49:e7:bf:7b:35:15:a1:cc:43:b8: 9d:29:70:05:69:2f:d2:9f:a4:fd:2d:75:db:9d:6a: 95:52:34:cd:0c:62:98:f2:20:80:11:93:cb:9d:58: 98:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:49:F6:95:93:41:B7:F7:35:D5:7A:B5:4E:85:03:9C:49:4D:73:B8 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.128.248.0/22 Signature Algorithm: sha256WithRSAEncryption 58:6c:f6:49:eb:45:d1:51:28:f9:df:c7:ba:c3:26:d5:16:96: 05:78:56:ba:cc:9e:1c:a1:b8:74:41:63:48:58:9c:c6:bb:cd: d0:da:f9:84:cb:bd:75:77:79:a3:31:26:8a:d2:2a:ea:1a:09: 93:9c:7b:62:11:3e:2d:78:b9:f8:af:0e:e4:03:3c:9c:96:27: b2:33:1d:40:15:b4:e4:76:0f:b9:7a:20:43:6a:f4:f8:2f:21: 02:1c:e3:c7:a3:35:80:91:03:66:f1:69:d0:49:f7:cf:57:f9: b2:64:12:3d:0f:87:ae:f6:a0:89:fc:c1:87:c9:a7:19:0a:fa: fb:10:04:db:ce:ac:b1:ab:78:e5:c3:d2:ba:94:29:c2:75:00: 58:84:80:b2:0f:db:7e:4e:49:e2:1f:c5:f1:17:de:07:ad:5b: 3b:14:02:ee:b6:04:00:fb:26:d6:d0:9a:c7:45:4b:b1:d5:63: fb:d0:7e:6d:bf:66:1a:f9:00:f6:44:e8:0e:a7:f5:05:62:fc: 4f:b3:bf:33:83:46:c0:c8:38:af:a5:61:e5:8e:59:62:87:84: ec:8b:42:69:c0:a5:d4:fe:76:f9:33:35:80:11:4d:ed:8d:48: 3b:dc:27:59:09:22:6f:c5:0f:fa:30:d0:b9:4f:91:35:42:71: d8:8f:d9:e0 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXbP1/HpTATxt48oN8hN9PblixAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTAxMDgwMzU1MzZaFw0yNjAxMDcwNDAwMzZaMDMxMTAvBgNV BAMTKDc2NDlGNjk1OTM0MUI3RjczNUQ1N0FCNTRFODUwMzlDNDk0RDczQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmzqpVh8G06SIf2yISpP9M66e uTqOnD39aSsc6hUCqmItw1uWRzP3LfiONAQ4BxKleI0UaRDh28s4Gm+W7YBIHbWs dCqUniwFFkaYgxQ1db6w4B7RsKzwDAN0hEEwvFebRIMfUg3R132KRbiK1KnikbeW CAyl7pXn2KQ7InKGsWj192P4wgC6fa+dgZnt5TzjCvDbxCgDbjY9zJLA6hkXbzEg 1lNLIxtOqwEAyiE4KQXlzGNCM1CBSK3j4ygxpO23ldH6BEvAzQCNK+KPT2eiKfY5 tzdySee/ezUVocxDuJ0pcAVpL9KfpP0tddudapVSNM0MYpjyIIARk8udWJjpAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUdkn2lZNBt/c11Xq1ToUDnElNc7gwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzAzMzJlMzEzMjM4MmUzMjM0MzgyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALLgPgwDQYJ KoZIhvcNAQELBQADggEBAFhs9knrRdFRKPnfx7rDJtUWlgV4VrrMnhyhuHRBY0hY nMa7zdDa+YTLvXV3eaMxJorSKuoaCZOce2IRPi14ufivDuQDPJyWJ7IzHUAVtOR2 D7l6IENq9PgvIQIc48ejNYCRA2bxadBJ989X+bJkEj0Ph672oIn8wYfJpxkK+vsQ BNvOrLGreOXD0rqUKcJ1AFiEgLIP235OSeIfxfEX3getWzsUAu62BAD7JtbQmsdF S7HVY/vQfm2/Zhr5APZE6A6n9QVi/E+zvzODRsDIOK+lYeWOWWKHhOyLQmnApdT+ dvkzNYARTe2NSDvcJ1kJIm/FD/ow0LlPkTVCcdiP2eA= -----END CERTIFICATE-----Generated at Sun Apr 6 16:02:16 2025 by rpki-client